Editing: info4stu/login_action.asp

<!--#INCLUDE FILE="ConnectDB.asp"--> <% username = Request.Form("txtusername") password = Request.Form("txtpassword") 'response.write username sql = "select * from info_member where username = '" & username & "' and password = '" & password & "'" 'response.write "lecturer" Set ors = Server.CreateObject("ADODB.Recordset") ors.Open sql, Conn, 1, 3 ' login_name_l=ors("login_name_l") 'response.write login_name_l if not ors.eof then result = ors(0) end if ors.Close set ors = nothing if result > 0 then Session("id_member1") = username session("member")=username '�������Է��� Response.redirect "index.asp" ' response.write username else Session.abandon 'response.write username Response.redirect "system_error.asp?err_id=02" end if %>